tuxec

@tuxec@infosec.pub

• ⁨Comment⁩ on ⁨Encrypting data on local servers?⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Checkout this one: blog.haschek.at/2020/the-encrypted-homelab.html

  It might be what you’re looking for.

• ⁨Comment⁩ on ⁨Best web archiving software for complex sites and sites requiring logins?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Zotero

• ⁨Comment⁩ on ⁨Looking for a good RSS Reader⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  I’m actually paying a yearly subscription to support the project. I have the self-hosting task in my backlog, but I keep dragging it 😶‍🌫️

• ⁨Comment⁩ on ⁨Looking for a good RSS Reader⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  NewsBlur

• ⁨Comment⁩ on ⁨How do you keep track of vulnerabilities?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  There are a couple of things to cover here:

  1. Keep your software/containers up to date. You can subscribe to the GitHub repo and configure it to get notified for new releases and security alerts. Complementary, you can use newteleases.io and/or WUD (What’s Up Docker) and add labels to your docker compose files. Personally, I check the notification once a week and change the version for all minor tools I’m using. If there is a major release (or new Immich version) I read the changelog and update instructions (if it’s the case).

  2. For security scans, you use Trivy, but the problem is that you don’t have a centralized overview of your scan results. For this you can use DefectDojo. Depending on the case/threat model, vulnerability management for self-hosted things might be overkill, but highly recommended of you want to learn more about this. It worth mentioning Trufflehog as secrets scanner and sops as a solution to encrypt sensitive data so you can push it to git/SCM.

• ⁨Comment⁩ on ⁨Anyone run a matrix server in the cloud? How much does it cost you?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  You might wanna check out this article: lukesmith.xyz/articles/matrix-vs-xmpp/

  I found it after I already settled with snikket.im The mobile application is reliable and there is Conversation as desktop client. From my point of view, the audio and video quality of Snikket are way better than Matrix.

  It worth mentioning that initially I wanted to set up a Matrix server also, but I had second thoughts because I knew how resource intensive are the mobile app and the server also.

• ⁨Comment⁩ on ⁨Anyone self-hosting ActualBudget? (with connection to bank)⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

  I’m not familiar with any of those two, but yes, you can add split transactions.

• ⁨Comment⁩ on ⁨Anyone self-hosting ActualBudget? (with connection to bank)⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

  Hi,

  I’m using Actual Budget and I connected my company’s bank account (wich is on someone’s name) with it to sync all transactions.

  From a privacy perspective, I share your concerns. This was the reason I haven’t connected any of my personal accounts.

  The sync in itself is useful, but if you’re making a routine to add an entry in Actual everytime you’re making a purchase, you’ll get the most of it without trading your privacy.

• ⁨Comment⁩ on ⁨Selfhosted alternative to Spotify⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

  I’m syncing Spotify playlists with Lidarr and play my music in Jellyfin or Symfonium.